Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/Rxf_0VmajyqD1kIVQku-y2EcUZU.roa
File: Rxf_0VmajyqD1kIVQku-y2EcUZU.roa (raw, json)
Hash identifier: Y+5VU3BBeox6ZChLkjcI3PAXZ5wl9FUs+AoY1y7vJIE=
Subject key identifier: 47:17:FF:D1:59:9A:8F:2A:83:D6:42:15:42:4B:BE:CB:61:1C:51:95
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 01856FC27F3B75A9EBE0C435204880FC7C54
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/Rxf_0VmajyqD1kIVQku-y2EcUZU.roa
Signing time: Sun 01 Jan 2023 23:54:55 +0000
ROA not before: Sun 01 Jan 2023 23:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60295
IP address blocks: 193.25.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7f:3b:75:a9:eb:e0:c4:35:20:48:80:fc:7c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Jan 1 23:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4717ffd1599a8f2a83d64215424bbecb611c5195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:96:0a:a9:91:11:2b:a3:2f:26:54:d0:1b:
a9:f8:7e:f5:35:a7:e3:28:02:a2:82:78:b4:00:4f:
65:7b:53:ff:56:c0:56:e9:4b:81:8e:ad:68:4a:30:
4a:8e:8d:5e:03:0e:f4:53:7b:06:07:bb:34:ae:9f:
3f:96:f6:24:a0:96:56:29:b9:29:9c:1e:37:95:5d:
49:19:d6:b3:73:e0:b6:83:aa:2f:7d:e8:12:73:4d:
27:09:65:f8:46:20:89:6e:ef:9b:75:ad:f4:df:07:
ff:2f:9b:fb:0b:73:3e:56:8a:bc:f2:1a:f8:99:96:
93:05:ea:37:4f:a3:e5:33:40:73:9e:ef:6b:82:0d:
dd:de:99:0a:91:13:cd:a6:3a:c4:57:19:03:c5:d1:
a3:08:5d:6b:bc:49:c6:f1:6a:12:32:29:4d:4c:9e:
13:a7:37:4b:2f:4e:a4:2d:7a:c4:ca:e3:a2:7c:fa:
ca:f4:e0:3c:f3:91:e1:03:69:f1:23:fe:49:1a:3b:
bb:2c:6c:cd:41:59:62:79:ce:6c:76:23:a8:39:95:
3c:05:0f:94:8e:30:97:44:f1:7a:9e:27:3b:fb:b6:
97:d3:4c:67:18:e3:52:0e:ad:39:97:17:d3:83:34:
2a:a8:35:89:af:bc:15:84:29:10:fc:4a:3d:0b:0b:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:FF:D1:59:9A:8F:2A:83:D6:42:15:42:4B:BE:CB:61:1C:51:95
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/Rxf_0VmajyqD1kIVQku-y2EcUZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
00:50:b8:a4:7f:90:93:da:fa:ee:ff:66:7f:d7:64:75:13:71:
91:b6:b6:ed:36:11:a9:7e:ac:85:ee:18:f6:76:d0:45:c3:7e:
28:33:96:56:2d:69:0c:5f:6b:47:1d:49:8d:b6:77:1a:02:96:
f8:29:08:03:35:b7:4c:85:7e:38:23:70:4d:4d:79:11:a7:ea:
25:a6:63:e2:f8:c2:a7:26:98:f9:6f:48:d7:d9:9e:e7:28:0c:
64:7b:73:2e:62:e5:e6:b4:8e:86:c3:ac:fa:ca:1e:0e:74:68:
0a:42:7c:b7:bb:c9:d4:64:33:fa:d8:8f:db:68:f5:68:18:24:
4e:c8:a3:df:2b:ce:c0:31:66:10:20:98:bd:40:fa:b8:ac:7d:
77:58:34:c3:6a:cc:a4:e1:2f:f1:d0:e1:fe:a5:14:66:60:60:
fc:71:f0:af:f2:25:f3:d8:cc:8e:b2:af:96:5c:3b:3e:0c:92:
63:8e:70:16:46:cf:12:8e:ad:ee:c3:68:4c:c1:6b:b1:2b:6d:
30:1c:83:55:fe:2d:a2:63:ed:81:dc:bf:22:00:ce:67:9c:a6:
07:8a:a5:65:86:94:0d:31:1c:c0:b1:38:a8:f4:45:dd:ad:93:
5f:49:72:c6:c6:5f:64:89:32:19:ee:6f:7d:83:45:b4:c2:47:
4f:df:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:17 2024 by rpki-client on console-fra.rpki-client.org